WHAT IS CLAIMED IS: 



1. A relay devl/ce, comprising-; 

a first interface unit connected to a first network; 

a second inxerface unit connected to a second network; 

a proxy conr ig^uration unit for disclosing a 
device/service/spb-unit on the second network as an own 
device/service/sjub-unit provided on the relay device with 
respect to a fiWst network side; 

a control dommand reception unit for receiving- control 
command signals/ destined to the own device/service/sub-unit 
from the first frietwork side; 

a control /command transmission unit for transmitting 
signals corresponding to the control command signals 
received by the control command reception unit, to the 
device/servic^/sub-unit on the second network; 

a contents protection information reception unit for 
receiving conftents protection information destined to the 
own device/se[rvice/sub-unit , from a device on the first 
network; and 

a contenlts protection information transfer unit for 
transferring the contents protection information received 
by the contents protection information reception unit to 
the device/sdrvlce/sub-unlt on the second network, without 
making any change in the contents protection information. 



A relay/ device , comprising: 
a first? interface lunit connected to a first network; 
a secoAd interface unit connected to a second network; 
a proVy configuration unit for disclosing each 
device/serA^ice/sub-uniyt on the first network or the second 
network asS an own device/service/sub-unit provided on the 
relay device with regpect to respective another network 
side ; 

a rfontrol commafnd reception unit for receiving control 
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command signals destined to the own /device/service/sub-unit 
from a side of one network to whicti the own 

le/sub-unit is disclosed by the proxy 
unit ; 

»jL command transmis/feion unit for transmitting 
isponding to the o'ontrol command signals 
received by the control commarid reception unit, to said 
each device/se rvice/sub-uni^ on another network different 
from said one network; 

a contents protection information reception unit for 
receiving contents proteo4;ion information destined to the 
own device/seryice/sub-imit from a device on the first 



network or the 
a contents 
transferring th 



second njetwork; 

protection information transfer unit for 
e conterits protection Information received 
by the contentsj protection information reception unit to 
said each device/seryice/sub-uni t on said another network, 
without making any ciiange in the contents protection 
Information; 

a content 
destined to t 
by a contents 
information, 
second networ 

a conte 
received by 
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eption unit for receiving contents 
device/service/sub-unit and protected 
obtained from the contents protection 
a device on the first network or the 
and 

transfer unit for transferring the contents 
fe contents reception unit to said each 
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device/servidLe/sub-unit on said another network, without 
making any change in the contents. 



30 3. The relay device of claim 2, wherein the contents 

protection information is information related to a contents 
protection procedure including an authentication and/or a 
key exchange between one device/service/sub-unit on the 
first netwbrk and another device/service/sub-unit on the 

35 second nex;work. 
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4. The relay device /of claim 2. further comprising: 
a configuration Information reception unit for 

receiving a configuration information from one 
devlce/service/sub-unlt on the first network or the second 
network, the conf Igurktion information indicating at least 
a presence or absence of an authentication format for said 
one device/servlce/siAb-uni t ; and 

a configuration/ recognition unit for recognizing a 
configuration of saj/d one device/servlce/sub-unit according 
to the configuration information received by the 
configuration InforAnation reception unit. 

5. A relay devic^, comprising: 

a first Interface unit connected to a first network; 

a second interface unit connected to a second network; 

a proxy configuration unit for disclosing each 
device/service/sAb-unlt on the first network or the second 
network as an own device/servlce/sub-unit provided on the 
relay device with respect to respective another network 
side; / 

a control /command reception unit for receiving control 
command signalii destined to the own device/servlce/sub-unit 
from a side of / one network to which the own 
device/servicd/sub-unit is disclosed by the proxy 
configuration /unit ; 

a control command transmission unit for transmitting 
signals correfsponding to the control command signals 
received by the control command reception unit, to said 
each devlce/service/sub-unlt on another network different 
from said one network; 

a first contents protection unit for carrying out a 
contents pnotectlon procedure with respect to one 
devlce/ser\rlce/sub-unlt on the first network; 

a secjbnd contents protection unit for carrying out the 




contents protection procedure with respect to another 
device/service/sub-unjlt on the second network; 

a contents receptlion unit for receiving contents 
destined to the own defvice/service/sub-uni t and encrypted 
according to one of tfie first and second contents 
protection units; an< 

a contents transfefer unit for transferring the contents 
received by the contfents reception unit to said each 
device/service/sub-unit on said another network, by 
encrypting the contents according to another one of the 
first and second co/ntents protection units 

6. The relay device of c/laim 5, wherein the first 
contents protectioh unit /and the second contents protection 
unit use different encryption schemes or Identical 
encryption scheme / basecy on different key information. 



7. The relay deVice of claim 5, wherein the contents 
reception unit aiid the contents transmission unit are 
sealed within a jingle LSI. 

8. The relay device of claim 5, wherein a first key 
information use/d in the contents protection procedure in 
the first contents protection unit and a second key 
information usfed in the contents protection procedure in 
the second coi/tents protection unit are set to be 
identical . 



9. The reldy device of claim 8, wherein the contents 
protection procedure in said another one of the first and 
second contents protection units is carried out in units of 
contents/se^vlces/sub-unlts , using a prescribed key 
inf ormat ioi 



10. The tfelay device of claim 5, further comprising: 



a configuration information reception unit for 



receiving a configurat 
devi ce/ service/ sub -uni 



ion information from one 

t on the first network or the second 



network, the configuration information indicating at least 



a presence or absence 
one device/service/sut 



of an authentication format for said 
-unit; and 



a configuration lecognition unit for recognizing a 
configuration of said one device/service/sub-unit according 
to the configuration information received by the 
configuration informa/tion reception unit. 



11. A relay device ,/ comprising: 

a first interface unit connected to a first network; 
a second interfface unit connected to a second network; 
a first contents protection unit for carrying out a 
contents protection/ procedure with respect to one 
device/service/subT?unit on the first network; 

a second cont/ents protection unit for carrying out the 
contents protection procedure with respect to another 
device/service/siyb-uni t on the second network; 

a contents reception unit for receiving contents 
destined to an oAvn device/service/sub-unit on the relay 
device and encrypted according to one of the first and 
second contents/ protection units, from a device on one of 
the first netwolrk and the second network; and 

a contents transmission unit, for transmitting the 
contents received by the contents reception unit to a 
device/servicfe/sub-unit on another one of the first network 
and the secorid network, by encrypting the contents 
according to/another one of the first and second contents 
protection uliits; 

whereiri a first key information used in the contents 
protection procedure in the first contents protection unit 
and a secon/d key information used In the contents 
protection /procedure in the second contents protection unit 
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12. A communication device, comprising: 

an interface unit connected to a network; 
a copy protection processing unit for carrying but a 
prescribed contents protection procedure including at least 
an authentication procedure and/or a key exchange 
procedure, with respect to another device/service/sub-unit 
on the network; 

a contents trensmission unit for transmitting 

to which ah address of the communication 
either through a virtual channel on the 
network or by further attaching an identifier by which the 
encrypted contents/ can be uniquely identified by the 
communication devi/ce, to another device on the network; 

a reception unit for receiving a query regarding a 
service/sub-unit/iblug that is transferring the encrypted 
contents either through the virtual channel or by attaching, 
the identifier, from said another device on the network; 
and 

a notification unit for notifying a servlce/sub- 
unit/plug that is transferring the encrypted contents, to 
said another device on the network in response to the 
query . 



13. A communication device, comprising: 

an interfface unit connected to a network; 
a copy protection processing unit for carrying out a 
prescribed cohtents protection procedure including at least 
an authentication procedure and/or a key exchange 
procedure, with respect to another device/service/sub-unit 
on the netwofrk; 

a contents reception unit for receiving encrypted 
contents to/ which an address of another device on the 
network is attached, either through a virtual channel on 
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the network or in a form having an identifier by which the 
encrypted contents can be uniquely identified by said 
another device further attached thereto, from said another 
device; 

a transmission unit for transmitting a query regarding 
a service/sub-unit/plug that is transferring the encrypted 
contents either through the virtual channel or by attaching 
the identifier, to said another device on the network; and 

a reception unit for receiving a notification 
regarding a service/jsub-uni t/plug that is transferring the 
encrypted contents, /from said another device in response to 
the query 

14. A communicatioil device, comprising: 

an interface unit connected to a network; 
a contents transfer unit for transmitting or receiving 
\^ith respect to another device on the 
flow identified by a set of a source 
ort, a destination address, and a 



encrypted contents 
network, through a 
address, a source p 



destination port; and 



a copy proteeth 
prescribed contents 



on processing unit for carrying out a 
protection procedure including at least 
an authentication procedure and/or a key exchange procedure 
with respect to saAd another device, using a prescribed 
logical port, in units of the flow. 



15. The communication device of claim 14, wherein an 
identifier of the flow is attached to information exchanged 
in at least a peJrt of procedures included in the prescribed 
contents protection procedure. 



16, A coimnunication device, comprising: 

an interface unit connected to a network; 

a copy protection processing unit for carrying out a 

prescribed coiytents protection procedure including at least 
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an authentication procedure and/or a key exchange 
procedure, with respect to another device on the network; 
and 

a contents trfansmlsslon and reception unit for 
transmitting or receiving encrypted contents to which an 
address of a tranfsml ttlng side device is attached, either 
through a virtual channel on the network or in a form 
having an identijrier by which the encrypted contents can be 
uniquely Identified by said transmitting side device 
further attache4 thereto, with respect to said another 
device ; 

wherein at | least one of an identifier of a service, a 
sub-unit, a virtual channel, or a plug that carries out 
exchange of the! encrypted contents, and an identifier by 
which the encrypted contents can be uniquely Identified by 
said transmitt ling side device, is attached to Information 
exchanged in ay least a part of procedures included in the 
prescribed contents protection procedure. 
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17, A relay device, comprising: 

a first /interface linit connected to a first network; 
a secona interface unit connected to a second network; 
a first? copy protyectlon processing unit for carrying 
out a prescribed contents protection procedure including at 
least an au/thentlcat ^on procedure and a key exchange 
procedure , /with respect to one device/servlce/sub-uni t on 
the first network; 

a seaond copy protection processing unit for carrying 
out the pyescribed contents protection procedure including 
at least an authenmcation procedure and a key exchange 
procedure, with respect to another device/servlce/sub-unit 
on the siecond network; 

a Contents reception unit for receiving encrypted data 
contairying specific contents from the first Interface unit; 
a/ decryption/ unit for decrypting the encrypted data 
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a conversion uiit for converting the decrypted data 



into converted data 
an encryption 

by using a contents 

copy protection pro 

data; and 

a contents tr 



in another coding format; 
linlt for encrypting the converted data, 
protection key provided by the second 
esslng unit, to obtain re-encrypted 
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i.H 



if=5 

Hp 



18. The relay dev 
a proxy confi 
device/ service/ sub 



.ce of claim 17, further comprising: 
Lburation unit for disclosing one 
15 device/service/sub-unit on the second network as one own 
device/service/sutJ-unit provided on the relay device with 
respect to a first network side, and transmitting to said 
one device/service/sub-unit on the second network an 
information havinjg a content according to information 
20 destined to said lone own device/service/sub-unit that is 
received from a device on the first network side, while 
also disclosing another device/service/sub-unit on the 
first network asf another own device/service/sub-unit 
provided on the/relay device with respect to a second 
25 network side-, ahd transmitting to said another 

device/service/sub-unit on the first network an information 
having a content according to information destined to said 
another own device/servlce/sub-uni t that is received from a 
device on the/ second network side; 
30 wherein /when the prescribed contents protection 

procedure beitween a device on one network among the first 
and second networks and a device/service/sub-unit on 
another network among the first and second networks is to 
be carried /out, the proxy configuration unit carries out 
35 the prescribed contents protection procedure with the 
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device on /said one network by using one of the first and 
second copy protection processing units, while carrying out 
the presoribed contents protection procedure with the 
device/service/sub-unl t on said another network by using 
another /one of the first and second copy protection 
process/ing units. 



19. 



relay device, comprising: 

first interface unit connected to a first network; 
second interface unit connected to a second network; 
a first contents protection unit for carrying out a 
contents protection pro/cedure with respect to one 
device/service/sub-uniyc on the first network; 

a second contents protection unit for carrying out the 
15 contents protection procedure with respect to another 
device/servlce/sub-unit on the second network; 

a contents reception unit for receiving contents 
destined to an own /device/service/sub-unit on the relay 
device and encrypued according to one of the first and 
20 second contents protection units, from a device on one of 
the first network and the second networks; and 

a contents transmission unit for transml ttting the 
contents received by the contents reception unit to a 
device/servlce//sub-unit on another one of the frist network 
25 and the second/network, by encrypting the contents 

according to Another one of the first and second contents 
protection uiLits; 

wherein/said one of the first and second contents 
protection linits carries out an authentication and/or a key 
30 exchange wi/th a device/service/sub-unit on said one of the 
first network and the second network by referring to a 
relationstyip between the contents reception unit and the 
contents transmission unit, when there is a request for a 
precedure/ of the authentication and/or the key exchange 
35 with resEfect to said another one of the first and second 
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